search

garyhuntddn / node-react-cyber-essentials

3 stars 0 forks source link

How can the system be abused? #39

Open garyhuntddn opened 3 years ago

JaxGonth commented 3 years ago

Can brute force username and password entries because we haven't implemented a function where the logins get slowed down based on the amount of time they are inputting i.e. If they get 10 failed login attempts slow it down by 2 seconds and so on

JaxGonth commented 3 years ago

Account locks after too many failed logins

JaxGonth commented 3 years ago

Use CAPTCHA for every login (Picture authentication) I'm not a robot